Re: weak regex/glob in listprincs in kadmin (on ldap)?

"Chris Hecker" <[email protected]> writes:

> It's not clear how you'd iterate them all with the current API in a
> remotely efficient manner.  Maybe people don't want to do that very
> often though.

Whenever I wanted to do something like that, I generally did it using
kadmin.local or the library equivalent on a KDC replica rather than trying
to do it over protocol.

I'm not a huge fan of the kadmin network protocol.  It works, mostly, but
whenever I was doing something very complicated, I usually had better luck
writing some code that could run on a KDC against a local database (I
never used LDAP, but the same principle mostly applies) and then wrapping
my own protocol around whatever that operation wanted to return.

-- 
Russ Allbery ([email protected])             <https://www.eyrie.org/~eagle/>
________________________________________________
Kerberos mailing list           [email protected]
https://mailman.mit.edu/mailman/listinfo/kerberos